1.Class Overview
An URLConnection
for HTTP (RFC 2616) used to send and receive data over the web. Data may be of any type and length. This class may be used to send and receive streaming data whose length is not known in advance.
Uses of this class follow a pattern:
- Obtain a new
HttpURLConnection
by callingURL.openConnection()
and casting the result toHttpURLConnection
. - Prepare the request. The primary property of a request is its URI. Request headers may also include metadata such as credentials, preferred content types, and session cookies.
- Optionally upload a request body. Instances must be configured with
setDoOutput(true)
if they include a request body. Transmit data by writing to the stream returned bygetOutputStream()
. - Read the response. Response headers typically include metadata such as the response body's content type and length, modified dates and session cookies. The response body may be read from the stream returned by
getInputStream()
. If the response has no body, that method returns an empty stream. - Disconnect. Once the response body has been read, the
HttpURLConnection
should be closed by callingdisconnect()
. Disconnecting releases the resources held by a connection so they may be closed or reused.
For example, to retrieve the webpage at http://www.android.com/
:
1 URL url = new URL("http://www.android.com/"); 2 HttpURLConnection urlConnection = (HttpURLConnection) url.openConnection(); 3 try { 4 InputStream in = new BufferedInputStream(urlConnection.getInputStream()); 5 readStream(in); 6 finally { 7 urlConnection.disconnect(); 8 } 9 }
2.Secure Communication with HTTPS
CallingopenConnection()
on a URL with the "https" scheme will return an
HttpsURLConnection
, which allows for overriding the default
HostnameVerifier
and
SSLSocketFactory
. An application-supplied
SSLSocketFactory
created from an
SSLContext
can provide a custom
X509TrustManager
for verifying certificate chains and a custom
X509KeyManager
for supplying client certificates. See
HttpsURLConnection
for more details.
3.Response Handling
HttpURLConnection
will follow up to five HTTP redirects. It will follow redirects from one origin server to another. This implementation doesn't follow redirects from HTTPS to HTTP or vice versa.
If the HTTP response indicates that an error occurred, getInputStream()
will throw an IOException
. Use getErrorStream()
to read the error response. The headers can be read in the normal way using getHeaderFields()
,
4.Posting Content
To upload data to a web server, configure the connection for output usingsetDoOutput(true)
.
For best performance, you should call either setFixedLengthStreamingMode(int)
when the body length is known in advance, orsetChunkedStreamingMode(int)
when it is not. Otherwise HttpURLConnection
will be forced to buffer the complete request body in memory before it is transmitted, wasting (and possibly exhausting) heap and increasing latency.
For example, to perform an upload:
1 HttpURLConnection urlConnection = (HttpURLConnection) url.openConnection(); 2 try { 3 urlConnection.setDoOutput(true); 4 urlConnection.setChunkedStreamingMode(0); 5 6 OutputStream out = new BufferedOutputStream(urlConnection.getOutputStream()); 7 writeStream(out); 8 9 InputStream in = new BufferedInputStream(urlConnection.getInputStream()); 10 readStream(in); 11 finally { 12 urlConnection.disconnect(); 13 } 14 }
5.Performance
The input and output streams returned by this class are not buffered. Most callers should wrap the returned streams withBufferedInputStream
or
BufferedOutputStream
. Callers that do only bulk reads or writes may omit buffering.
When transferring large amounts of data to or from a server, use streams to limit how much data is in memory at once. Unless you need the entire body to be in memory at once, process it as a stream (rather than storing the complete body as a single byte array or string).
To reduce latency, this class may reuse the same underlying Socket
for multiple request/response pairs. As a result, HTTP connections may be held open longer than necessary. Calls to disconnect()
may return the socket to a pool of connected sockets. This behavior can be disabled by setting the http.keepAlive
system property to false
before issuing any HTTP requests. The http.maxConnections
property may be used to control how many idle connections to each server will be held.
By default, this implementation of HttpURLConnection
requests that servers use gzip compression. Since getContentLength()
returns the number of bytes transmitted, you cannot use that method to predict how many bytes can be read from getInputStream()
. Instead, read that stream until it is exhausted: when read()
returns -1. Gzip compression can be disabled by setting the acceptable encodings in the request header:
urlConnection.setRequestProperty("Accept-Encoding", "identity");
6.Handling Network Sign-On
Some Wi-Fi networks block Internet access until the user clicks through a sign-on page. Such sign-on pages are typically presented by using HTTP redirects. You can usegetURL()
to test if your connection has been unexpectedly redirected. This check is not valid until
after the response headers have been received, which you can trigger by calling
getHeaderFields()
or
getInputStream()
. For example, to check that a response was not redirected to an unexpected host:
1 HttpURLConnection urlConnection = (HttpURLConnection) url.openConnection(); 2 try { 3 InputStream in = new BufferedInputStream(urlConnection.getInputStream()); 4 if (!url.getHost().equals(urlConnection.getURL().getHost())) { 5 // we were redirected! Kick the user out to the browser to sign on? 6 7 ... 8 } finally { 9 urlConnection.disconnect(); 10 } 11 }
7.HTTP Authentication
HttpURLConnection
supports
HTTP basic authentication. Use
Authenticator
to set the VM-wide authentication handler:
1 Authenticator.setDefault(new Authenticator() { 2 protected PasswordAuthentication getPasswordAuthentication() { 3 return new PasswordAuthentication(username, password.toCharArray()); 4 5 }); 6 }
8.Sessions with Cookies
To establish and maintain a potentially long-lived session between client and server,HttpURLConnection
includes an extensible cookie manager. Enable VM-wide cookie management using
CookieHandler
and
CookieManager
:
1 CookieManager cookieManager = new CookieManager(); 2 CookieHandler.setDefault(cookieManager); 3
CookieManager
accepts cookies from the
origin server only. Two other policies are included:
ACCEPT_ALL
and
ACCEPT_NONE
. Implement
CookiePolicy
to define a custom policy.
The default CookieManager
keeps all accepted cookies in memory. It will forget these cookies when the VM exits. Implement CookieStore
to define a custom cookie store.
In addition to the cookies set by HTTP responses, you may set cookies programmatically. To be included in HTTP request headers, cookies must have the domain and path properties set.
By default, new instances of HttpCookie
work only with servers that support RFC 2965 cookies. Many web servers support only the older specification, RFC 2109. For compatibility with the most web servers, set the cookie version to 0.
For example, to receive www.twitter.com
in French:
1 HttpCookie cookie = new HttpCookie("lang", "fr"); 2 cookie.setDomain("twitter.com"); 3 cookie.setPath("/"); 4 cookie.setVersion(0); 5 cookieManager.getCookieStore().add(new URI("http://twitter.com/"), cookie);
9.HTTP Methods
HttpURLConnection
uses the GET
method by default. It will use POST
if setDoOutput(true)
has been called. Other HTTP methods (OPTIONS
, HEAD
, PUT
, DELETE
and TRACE
) can be used with setRequestMethod(String)
.
10.Proxies
By default, this class will connect directly to the origin server. It can also connect via anHTTP
or
SOCKS
proxy. To use a proxy, use
URL.openConnection(Proxy)
when creating the connection.
11.IPv6 Support
This class includes transparent support for IPv6. For hosts with both IPv4 and IPv6 addresses, it will attempt to connect to each of a host's addresses until a connection is established.
12.Response Caching
Android 4.0 (Ice Cream Sandwich, API level 15) includes a response cache. Seeandroid.net.http.HttpResponseCache
for instructions on enabling HTTP caching in your application.
13.Avoiding Bugs In Earlier Releases
Prior to Android 2.2 (Froyo), this class had some frustrating bugs. In particular, callingclose()
on a readable
InputStream
could
poison the connection pool. Work around this by disabling connection pooling:
1 private void disableConnectionReuseIfNecessary() { 2 // Work around pre-Froyo bugs in HTTP connection reuse. 3 if (Integer.parseInt(Build.VERSION.SDK) < Build.VERSION_CODES.FROYO) { 4 System.setProperty("http.keepAlive", "false"); 5 6 }}
Each instance of HttpURLConnection
may be used for one request/response pair. Instances of this class are not thread safe.